In btrfs_get_root_ref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an assertion failure and crash because a subvolume can be read out too soon after its root item is inserted upon subvolume creation. CREATE(Triage):(User=admin) CVE-2024-23850 (https://nvd.nist.gov/vuln/detail/CVE-2024-23850)
